Amazon Cognito Introduces Admin API to Reset User TOTP MFA Configurations

Amazon Cognito added an administrative API that allows resetting users’ TOTP multi-factor authentication settings, facilitating account recovery.

By Oliver Grant · Editorial pseudonym · 2026-08-26 · 1 min read

AI-ASSISTED REPORTING · RETROSPECTIVE ARCHIVE

Retrospective edition: 2026-08-26. Source published: 2026-08-26. Added to this archive: 2026-11-03. This briefing was prepared later from the linked announcement; it was not published on this website on the historical edition date.

Amazon Cognito implemented a new admin API operation enabling administrators to reset a user’s time-based one-time password (TOTP) multi-factor authentication configuration. This allows recovery when a user loses access to their TOTP device without account recreation, thus maintaining enforcement of MFA security policies.

Administrators can invoke the AdminDeleteSoftwareToken API via the AWS CLI, SDKs, or APIs. This capability became globally available across all AWS Regions offering Amazon Cognito, improving usability and administrative control over MFA recovery processes.

Source & further reading

Amazon Cognito adds admin API operation to reset user TOTP configurations ↗

Source published 2026-08-26. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.